Skip to content

[3.13] gh-127971: fix off-by-one read beyond the end of a string during search (#132574) #136645

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2,530 commits into from

Conversation

duaneg
Copy link
Contributor

@duaneg duaneg commented Jul 14, 2025

miss-islington and others added 30 commits May 20, 2025 18:56
…t_bytes.py (pythonGH-134234) (python#134379)

pythongh-131357: Add tests for zero-sized bytes objects in test_bytes.py (pythonGH-134234)
(cherry picked from commit 306f9e0)

Co-authored-by: abstractedfox <coldcaption@gmail.com>
Co-authored-by: Victor Stinner <vstinner@python.org>
…IOBase can be a RawIOBase (pythonGH-134372) (python#134375)

pythongh-85045: clarified that the underlying buffer of a TextIOBase can be a RawIOBase (pythonGH-134372)

Added a clarification that the underlying binary buffer of a TextIOBase can be a BufferedIOBase OR a RawIOBase
(cherry picked from commit 36eb711)

Co-authored-by: Alex Kautz <alex@takemobi.com>
… on PyREPL (pythongh-134380) (pythongh-134386)

(cherry picked from commit c91ad5d)

Co-authored-by: Chris Patti <feoh@feoh.org>
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
… data (pythonGH-134313)

(cherry picked from commit e4fbfb1)

Co-authored-by: Chris Eibl <138194463+chris-eibl@users.noreply.github.com>
…r` docstring (pythonGH-134371) (pythonGH-134404)

Co-authored-by: Sofia Toro <sofie.torch@outlook.com>
…id is supported (pythonGH-134408) (pythonGH-134414)

(cherry picked from commit e6dde10)

Co-authored-by: Noam Cohen <noam@noam.me>
…on (pythonGH-129312) (python#134420)

Co-authored-by: Yuki Kobayashi <drsuaimqjgar@gmail.com>
…ct docs (pythongh-132247) (pythongh-134427)

Two special methods, __buffer__ and __release_buffer__ were added to
Python 3.12 by PEP 688. The C API Type Object documentation for slots
includes `tp_as_buffer`, and sub-slots `bf_getbuffer`, `bf_releasebuffer`
but does not refer to the Python Data Model version of those. Add the
missing references.
(cherry picked from commit b529b60)

Co-authored-by: Cody Maloney <cmaloney@users.noreply.github.com>
…133983) (pythongh-134429)

(cherry picked from commit 84d5f8d)

Co-authored-by: Cody Maloney <cmaloney@users.noreply.github.com>
…pythongh-134431)

Test was only testing _io, expanded to cover _pyio.

(cherry picked from commit 06eaf40)

Co-authored-by: Cody Maloney <cmaloney@users.noreply.github.com>
Co-authored-by: Peter Bierma <zintensitydev@gmail.com>
…ons (pythongh-134165) (pythongh-134434)

Update `test_io` `_check_warn_on_dealloc` to use `self.` to dispatch to
different I/O implementations.

Update the `_pyio` implementation to match expected behavior, using the
same `_dealloc_warn` design as the C implementation uses to report the
topmost `__del__` object.

The FileIO one now matches all the others, so can use IOBase. There was
a missing check on closing (self._fd must be valid), add that check
(cherry picked from commit 5b0e827)

Co-authored-by: Cody Maloney <cmaloney@users.noreply.github.com>
…4192) (pythongh-134436)

This was added in the add of `_io`, isn't used since bpo-21859 when a
`_pyio` implementation was added which defines `FileIO` lower down in
the file.
(cherry picked from commit 0a68068)

Co-authored-by: Cody Maloney <cmaloney@users.noreply.github.com>
…cking (pythonGH-130653) (python#134445)

(cherry picked from commit e1f8914)

Co-authored-by: Cody Maloney <cmaloney@users.noreply.github.com>
…twork (pythonGH-134063) (python#134477)

pythongh-134062: Fix hash collisions in IPv4Network and IPv6Network (pythonGH-134063)
(cherry picked from commit f3fc0c1)


pythongh-134062: Fix hash collisions in IPv4Network and IPv6Network
pythongh-134062: Add hash collision regression test

Co-authored-by: Mike Salvatore <mike.s.salvatore@gmail.com>
…ncurrency key (pythonGH-134310) (python#134485)

pythongh-134309: Add ``github.actor`` to the GitHub Actions concurrency key (pythonGH-134310)

When inexperienced users create a PR from their default branch, all of the concurrency keys
collide as there is no namespacing. This becomes an issue at events with many new contributors,
where workflow runs are cancelled on other pull requests.
Disambiguate by adding the username of the relevant 'actor' to the concurrency key.
(cherry picked from commit 979d81a)





Authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>

Co-authored-by: Kira <coldcaption@gmail.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
Co-authored-by: Sviatoslav Sydorenko <sviat@redhat.com>
Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
…array (pythonGH-134458) (python#134490)

pythongh-131357: Add some extra tests for empty bytes and bytearray (pythonGH-134458)
(cherry picked from commit 7309eb6)

Co-authored-by: Sergey Miryanov <sergey.miryanov@gmail.com>
…ythonGH-129055) (pythonGH-132501)

(cherry picked from commit 522766a)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
…ythonGH-129056) (pythonGH-132499)

(cherry picked from commit f98b9b4)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
…ythonGH-129058) (pythonGH-132500)

(cherry picked from commit 7076d07)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
…) (python#134496)

Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
…n#134550)

Avoid `__file__` in `hashlib` example (pythonGH-134540)
(cherry picked from commit 9b292ff)

Co-authored-by: Josh Cannon <joshdcannon@gmail.com>
…loop is already closed in asyncio subprocess (pythonGH-134508) (python#134562)

pythongh-114177: avoid calling connection lost callbacks when loop is already closed in asyncio subprocess (pythonGH-134508)
(cherry picked from commit 5804ee7)

Co-authored-by: Kumar Aditya <kumaraditya@python.org>
…n Module Isolation HOWTO (pythonGH-134141) (pythonGH-134491)

Add notes on nogil & reinitialization to the Opt-Out section in Module Isolation HOWTO (pythonGH-134141)
(cherry picked from commit 1f0a294)

Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Sam Gross <colesbury@gmail.com>
…) (python#134572)

Co-authored-by: Blaise Pabon <blaise@gmail.com>
… (python#134573)

Co-authored-by: Blaise Pabon <blaise@gmail.com>
…d Thread after fork (pythongh-134514) (pythongh-134597)

(cherry picked from commit 9a2346d)

Co-authored-by: Jiucheng(Oliver) <git.jiucheng@gmail.com>
…sing (pythonGH-128841) (python#134611)

pythongh-128840: Limit the number of parts in IPv6 address parsing (pythonGH-128841)

pythonGH-128840: Limit the number of parts in IPv6 address parsing
Limit length of IP address string to 39

---------
(cherry picked from commit 47f1161)

Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy